This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/6dJJQaLsf-pJV9GESFzivPI_ry0.roa
File:                     6dJJQaLsf-pJV9GESFzivPI_ry0.roa (raw, json)
Hash identifier:          m4MRzFt8TKcOFXczGZjYk0il1r1Oq6foVjuEdpP4OLQ=
Subject key identifier:   E9:D2:49:41:A2:EC:7F:EA:49:57:D1:84:48:5C:E2:BC:F2:3F:AF:2D
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       019B7D5D1AD42700548D7265D18BAE936987
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/6dJJQaLsf-pJV9GESFzivPI_ry0.roa
Signing time:             Fri 02 Jan 2026 06:20:12 +0000
ROA not before:           Fri 02 Jan 2026 06:20:12 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     48108
IP address blocks:        94.247.137.0/24 maxlen: 24
                          193.43.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5d:1a:d4:27:00:54:8d:72:65:d1:8b:ae:93:69:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Jan  2 06:20:12 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=e9d24941a2ec7fea4957d184485ce2bcf23faf2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:d9:78:15:96:12:28:d5:4f:4f:3b:23:25:
                    65:31:b6:4b:8a:37:44:74:7f:6c:c6:70:0e:2d:ef:
                    12:41:0d:ad:ea:88:23:76:5b:5a:d6:10:78:f5:54:
                    ea:74:96:28:e7:55:7d:61:65:93:1b:77:f0:52:fa:
                    4f:ac:f8:10:57:c0:89:39:ad:12:c3:fc:21:0a:7e:
                    32:54:3c:ed:32:0c:76:f9:3d:01:d3:ac:b0:a1:d4:
                    47:a1:8c:f9:1c:49:54:c3:db:d8:00:b5:ad:1b:4a:
                    d7:30:db:9d:92:63:e3:45:91:3a:1e:a6:54:ac:7f:
                    8f:7e:7a:b2:4c:1f:31:b7:44:c8:60:ed:db:15:44:
                    0f:02:3e:8b:99:be:f7:43:e7:73:9b:ba:f8:36:72:
                    28:de:57:3e:96:33:1a:d6:8f:c5:9c:63:f6:df:3d:
                    b1:b9:81:50:a8:29:a5:51:44:07:ba:c6:fe:90:51:
                    a0:5c:2e:85:b8:55:c1:cf:8b:2e:92:6d:7b:0e:1e:
                    26:b6:3f:7d:28:3d:b3:d2:0c:a3:47:b2:c3:92:c6:
                    9c:6f:4f:66:46:7a:55:55:1c:8f:57:98:77:e2:aa:
                    5f:61:cd:36:5b:ca:d8:d3:0a:6d:f0:f9:ef:b2:e4:
                    5b:ee:f4:40:66:c5:92:80:7d:cd:27:df:ab:be:f8:
                    58:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D2:49:41:A2:EC:7F:EA:49:57:D1:84:48:5C:E2:BC:F2:3F:AF:2D
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/6dJJQaLsf-pJV9GESFzivPI_ry0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.137.0/24
                  193.43.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:c1:d3:6e:cb:8d:f6:0e:ae:4d:8e:27:6b:aa:99:2e:d6:87:
         9f:83:d5:4d:9f:88:8e:e4:b5:4f:c1:96:84:be:4f:7e:ae:92:
         65:26:a7:dc:4f:78:dc:4c:22:a9:42:fe:f4:17:2a:80:a4:0f:
         6f:63:4e:19:ea:fb:f7:da:23:67:90:01:ed:1b:51:bd:59:82:
         26:b6:90:4d:30:c4:f1:9c:bb:0c:14:7c:0c:bd:c4:24:62:3e:
         39:26:b2:b0:bc:c4:96:e6:be:e4:e9:4a:e6:a0:56:1a:9c:0c:
         a3:bd:ac:c6:09:5c:7e:f9:2d:49:ba:d5:48:89:f0:fe:29:a6:
         8a:0c:b8:49:85:80:0b:59:0c:15:ee:86:e6:ff:f9:c0:dc:d0:
         49:e4:54:82:57:09:97:16:26:d4:38:ed:fb:46:74:75:d8:e5:
         5c:08:6d:03:ad:63:a0:01:64:c3:d6:1c:2f:b5:2b:ea:7c:b9:
         5c:1b:4d:61:46:e7:97:86:45:93:a2:43:e0:49:50:df:20:74:
         f7:23:9a:e1:0d:89:30:22:d7:e6:66:37:0b:b5:3b:db:a6:f9:
         b0:30:e9:06:c3:ed:b1:b5:6f:31:2e:47:91:7f:fa:33:10:68:
         b3:11:7b:3a:8e:72:28:1a:f4:56:c9:b3:a2:ff:30:ab:9d:30:
         cc:21:39:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 12:42:49 2026 by rpki-client